Initial release — Sprout Nostr relay with enterprise extensions (#2)

deny.toml

@@ -0,0 +1,35 @@
+[advisories]
+ignore = [
+    # rsa 0.9.10 — Marvin Attack timing sidechannel. No fix available.
+    # Transitive dep: sqlx-mysql → rsa. Only used for MySQL TLS handshake,
+    # not for RSA key operations. Acceptable risk until sqlx updates.
+    { id = "RUSTSEC-2023-0071", reason = "transitive dep via sqlx-mysql; no upstream fix available" },
+    # instant 0.1.13 — unmaintained crate. Transitive dep: nostr → instant.
+    # Will be resolved when nostr crate updates its dependencies.
+    { id = "RUSTSEC-2024-0384", reason = "transitive dep via nostr; no upstream fix available" },
+]
+
+[licenses]
+allow = [
+    "MIT",
+    "Apache-2.0",
+    "Apache-2.0 WITH LLVM-exception",
+    "BSD-2-Clause",
+    "BSD-3-Clause",
+    "ISC",
+    "Unicode-3.0",
+    "Unicode-DFS-2016",
+    "Zlib",
+    "OpenSSL",
+    "CC0-1.0",
+    "CDLA-Permissive-2.0",
+    "MITNFA",
+]
+confidence-threshold = 0.8
+
+[licenses.private]
+ignore = true
+
+[bans]
+multiple-versions = "warn"
+wildcards = "allow"